Fake localhost access?

Malneb said:

yes you did

- - - Updated - - -

"if I enter the Web GUI from the same machine, localhost, I can delete torrents from it, if entered from any other LAN device, I can see the torrents but not delete them."

Regardless you are overall talking about managing a lan network which means you want a network admin role so yes user groups become relevant.

it took us this long to get here because you were cryptic.

Again, I said NOTHING about managing LANs. And about file deleting, let me quote myself, I already answered you about that:

eXtremeDevil said:

It's not like that at all. My example was about deleting torrents from the download list, about deleting a task inside BitTorrent. The settings visible or not depending if on localhost or not only affects the service itself, no Windows files or users involved. Sorry if it wasn't clear enough, I used a real example and I didn't thought about people not getting it. I supposed that those who have used the BitTorrent WebUI (mini web service) at some time would automatically understand that "deleting torrents" would refer to clearing them from the BitTorrent download list through the WebUI. And in any case, was just an example, on my first post I said that the localhost access exposes some settings that the access from other PCs on the LAN does not. I said nothing about handling files.

So please guys, try not to complicate or overthink this, is just a small service with few options of the same service that can only be changed if accessed the Web (administration) UI of the same service from localhost and not other computers of the LAN. No WAN, no port forwarding, no Windows settings/permissions/users, no NOTHING ESLSE.

ok help yourself then genius seeing as you already know what you think is wrong and right

- - - Updated - - -

We can only go what you tell us so if you telling us things like deleting files on pc A from pc B then YES that is a file perms situation which means you would want a domain.

So don't get snotty when people suggest stuff that you don't like. Because with your scenario and the parameters you have given so far this will be the issue. Unless you just want to go ahead and state what you are actually trying to achieve.

- - - Updated - - -

I mean really faking local host who even says that?

Malneb said:

ok help yourself then genius seeing as you already know what you think is wrong and right

- - - Updated - - -

We can only go what you tell us so if you telling us things like deleting files on pc A from pc B then YES that is a file perms situation which means you would want a domain.

So don't get snotty when people suggest stuff that you don't like. Because with your scenario and the parameters you have given so far this will be the issue. Unless you just want to go ahead and state what you are actually trying to achieve.

- - - Updated - - -

I mean really faking local host who even says that?

English is not my native language so I had no better way of putting it. I guess I could say "spoof accessing from localhost when really accessing from another PC of the LAN to a mini web ui service like BitTorrent web ui", but I think that would be more confusing and after all, the long explanation would be on the first post and not the title.

I'm definetely not a genius, or else I wouldn't be asking here. Sorry if I offended you, it was not my intention and I'm really not trying to be snotty. It was just a confusion, I typed fast and didn't think that talking about deleting torrents (not files) in a context of a BitTorrent Web GUI would not be understand. I'm just trying to find a solution to a problem and, if I am not explaining myself well, I will do so as many times as necessary. But it is hard when other users jump to conclusions that fast. Because, like I already said, I never said anything about files; about the torrent thing, I said it was an example; I never said anything about port opening...

I have a service that creates a Web GUI and, depending if entering it from its localhost or other LAN PC through its IP, it has more or few options. It's a propietary software, nothing widely known as WAMP or anything like that. No Windows files or users involved, only settings within the same service.

yep so settings that it will be storing in a file or db somewhere so this is still file perms scenario

Malneb said:

yep so settings that it will be storing in a file or db somewhere so this is still file perms scenario

I haven't used may WebUIs, but I do know that what do just say is totally doable out of the box. Because following my BitTorrent example, with the WebUI you can change BitTorrent settings and you don't have to do anything with Windows permissions. You execute BitTorrent on PC A, then, on the app itself, you make a change, and BitTorrent stores the change. You don't need to run BitTorrent as admin or give any special write permission. It's like any other app. Well, the WebUI does just that, but from web interface. You connect to http://localhost on the same PC running BitTorrent or to http://IP-OF-BITTORRENT-RUNNING-PC (internal IP, always in LAN), and you can actually change BitTorrent settings from PC B to PC A with no Windows users or permissions involved!

I tried right now, the app is actually "qBitTorrent". And I did change a setting of the qBitTorrent running on PC A from PC B through the web ui. I can provide screenshots if you want.

Ok so what is the problem then because now the thread is messy af if you can now change the settings what is the problem?

- - - Updated - - -

Using a web frontend will be localized on the pc it is installed on so you should not have perm issues, this conclusion was just made because i was reading you literally because that is what happens when you leave out details it causes confusion.

qbittorrent is free also so i am not sure why you had to hide all this?

Malneb said:

Ok so what is the problem then because now the thread is messy af if you can now change the settings what is the problem?

- - - Updated - - -

Using a web frontend will be localized on the pc it is installed on so you should not have perm issues, this conclusion was just made because i was reading you literally because that is what happens when you leave out details it causes confusion.

qbittorrent is free also so i am not sure why you had to hide all this?

Well, I am sorry if you feel I have left out details, and for that I apologize. But I'm sincerely starting to think you didn't read me carefully. Taking in consideration my initial posts and my example on page 3 I really think the problem/situation would be understood. But in any case, here it is again.

Now, before explaining it again, I am really serious and I don't want to be smart, funny, stupid or arrogant, so please don't think for a second I'm messing with you. I repeat, it was AN EXAMPLE. I ALREADY SAID "IMAGINE" that my app is qBitTorrent and its web ui. But it is NOT. I said that so as not to reveal the real app. Taking my example, in my case I can not change the "qBitTorrent" options from the UI if I am not in localhost, and what I want is to be able to change them also from other PCs of the LAN. Imagine that. What qBitTorrent REALLY does right now is not what I just said. What I just said is MY situation with MY app.

It's what I've been saying since the first post: I have an app that creates a web service (web ui, whatever) which shows (or not) some options depending on whether you enter it from localhost or another PC on the LAN through the IP of the PC running this app/service.

Since I didn't want (and don't want) to say the real name out of respect for the original developer (since this restriction is there for users to pay for the app and unlock this behaviour), you told me I was being cryptic and you couldn't help. So I gave the you the qBitTorrent example: "think of the BitTorrent web ui". But obviously, you had to take into account what was said in the first post also, not think about qBitTorrent as the real situation. If we put it all together:

I am currently using an app, of which I prefer not to say the name, on a PC on my LAN. Just so there is no confusion, let's say it's qBitTorrent, since my problem can be perfectly applied to this app, but it's REALLY NOT QBITTORENT. qBitTorrent has the option to activate a web service, or web ui, to manage the app from a browser. This is useful for managing qBitTorrent from another PC on the LAN. Now, although THIS IS NOT THE REAL BEHAVIOUR OF QBITTORENT, let's say that this web ui has more or less options if you enter it from localhost or not. For example, accessing from htttp://localhost, that is, entering the web ui on the same machine where qBitTorrent is running (something stupid on the other hand) I can clear the list of completed torrents, but entering from another PC on the LAN to http://IP-OF-THE-QBITTORRENT-RUNNING-PC, I can see the list of torrents but I cannot clear it. I repeat again, this is the IMAGINED scenario that I REALLY have, this is what happens with MY APP and not with qBitTorrent.

What I want is to access from any PC of the LAN with http://IP-OF-THE-QBITTORRENT-RUNNING-PC to the web ui (that can be already be done by default) but also BE ABLE to clear the torrents list, currently only doable if entering from localhost.

I hope this clears things up, if not please ask me anything, and I'm really not being clever, I'm just trying to get some help.

Malneb said:

Just stop talking in the third person then your ****en broken English makes it hard tbh and when you say stuff like this then people read it as literally because you just said with a post like this that the app is qbittorernt when its actually not wtf do you expect?

I honestly didn't realize I was talking in third person. In any case, I will try my best to explain the best I can, I always do, sorry for that, no need to get angry.

- - - Updated - - -

Malneb said:

Again any web front end will be localized to its host so if you are not going to say what it is you are using then we cannot give the answers you need.



If you access the web front end from PC B through a browser then you should be able to manage the service because the web ui is local to PC A, if this is not the case then you are making it hard by not really explaining what it is you are doing exactly.

I'm telling you what I'm doing. Since I prefer not to tell the real app's name, let's PRETEND the app is qBitTorrent, and also, let's PRETEND that, when not accessed from localhost but from PC B, the web ui limit you the actions you may perform. That's it, simple as that.

Malneb said:

There still could be file permissions at play and also a credentials hierarchy but because you are not really explaining what you are doing 100% then you will only get answers that pertain to that.

- - - Updated - - -

As I say above, PRETENDING qBitTorrent is the app, you will have to agree with me that clearing the torrents list from the web ui (that's just an example, take any other simple action of the qBitTorrent web ui if you don't like that one) does not involve file permissions, nor credentials, right??

Please, I already answered you this, let me make it clear: there is no permissions or credentials involved. Believe me, it all starts and ends with the app (the real one, not qBitTorrent) itself. The app (the real one, not qBitTorrent) gives a web ui to manage itself, just like qBitTorrent does, regardless of the OS. This app (the real one, not qBitTorrent) has a mechanism to detect if the connection to the web ui is from localhost or not in order to hide some options or not. What I'm trying to do is to connect from other PCs rather than localhost without triggering that mechanism, and so far I have sucessfully done it with SSH tunnel. What I ask here is if there are any other options. Nothing more, nothing less.

Malneb said:

The very first post is asking for you to elaborate more so it is kind of setting the tone for the thread tbh.
Networking can become advanced and complicated very quickly, so if you are going to talk in the third person and not really divulge what you are trying to achieve fully then you cannot expect others to wrap their brains around your issue either.

Sorry if that's how you feel or if that is how I made you feel. I think at this point I've explained perfectly what I'm trying to do. I just didn't specify the service involved. But let me assure you, as a guy that works in IT, it does not matter which one is it. Nevertheless, if you need a real life scenario to understand it or give answers, take my qBitTorrent example, and if it not enough, then I'm really sorry but AGAIN, out of respect for the original developer, I will not say which app it is. If that prevents people from helping me, I'll have to settle for that.

Google "Windows proxy server software".

Try Wingate once. WinGate Proxy Server. Web Proxy for Windows


The idea here is that you setup the proxy server on computer A running the other "server" and then on computer B you simply configure your browser network settings to proxy into computer A. Now you should have that "localhost" like environment.


You wanna use the SOCKS protocol.


WinGate: Installation - YouTube